Static task
static1
Behavioral task
behavioral1
Sample
Benign_caaa00eb90eac214552b202445234f2724799a621f5a1cd44e04ad195f056bcc.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Benign_caaa00eb90eac214552b202445234f2724799a621f5a1cd44e04ad195f056bcc.exe
Resource
win10v2004-20230621-en
General
-
Target
Benign_caaa00eb90eac214552b202445234f2724799a621f5a1cd44e04ad195f056bcc.exe
-
Size
7.9MB
-
MD5
50542a0c111e96bf6806ba37022fb2c1
-
SHA1
6b60f0da5267f90098c1739cf1f30ec35018ed5b
-
SHA256
e868afa3e550336e6b8a06cfa46ec9ea33ff827c0c1227c9d67d59f2a0ce552c
-
SHA512
b584ad2e4d2986bce9f0eaf70837af6ca7bc98d52ce9bd732f8169ba3029e1e69b65dd5735ea815a28fd1517e4eef0949def82bd36ba37595480c328ca1e6bbd
-
SSDEEP
98304:owK3vd6D5QNMBxIDEcjFrArF1Q77vMN/P8xh/X2NfJwdTfj:opvdvmXJQFUrFMv6cDOTwx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Benign_caaa00eb90eac214552b202445234f2724799a621f5a1cd44e04ad195f056bcc.exe
Files
-
Benign_caaa00eb90eac214552b202445234f2724799a621f5a1cd44e04ad195f056bcc.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 281B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 714KB - Virtual size: 714KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 25KB - Virtual size: 24KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 42B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 769KB - Virtual size: 769KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 238KB - Virtual size: 238KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 893KB - Virtual size: 892KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ